Paste a DMARC aggregate report and see who is sending as your domain, what passed, what failed and what to fix first. The report never leaves your browser.
Loading tool…
Lower stack cost. Back in the inbox. Built to send at any scale.
We rebuild it properly: secondary domains, inboxes, SPF, DKIM and DMARC set to enforcement, warmup and safe sending limits, blacklist monitoring on top. Send-ready in about 17 days. No campaigns, no copy, no lead lists. Infrastructure only.
Almost a decade building cold outreach infrastructure, including his own sending and verification stack built from scratch. 20+ B2B clients at companies worth $10M and above, all in tier one countries.
Free · Written plan + fixed price · No sales call required
Mailbox providers that receive mail for your domain send DMARC aggregate reports once a day. Each report is an XML file that lists every source IP that sent mail using your domain, how many messages it sent, and whether SPF and DKIM passed for those messages. This tool reads that file and turns it into numbers you can act on: total messages, how many passed DMARC, and a row for every sending source. The report is parsed in your browser with the tools built into the page. It is not uploaded anywhere and it never leaves your browser.
Start with the pass percentage. A high pass rate with one or two small failing sources is normal at first, because forwarding and mailing lists break SPF and DKIM in predictable ways. A source you do not recognise that sends a lot of volume and fails both SPF and DKIM is the row that matters. That is either a sender your team forgot to authenticate or someone else sending as your domain, and your DMARC policy decides what happens to it. Check your live policy in the DMARC Checker alongside the report.
Authenticate the senders you own before you tighten anything. Every tool, inbox provider and CRM that sends as your domain needs SPF coverage or its own DKIM key, ideally both. When the failing rows in the report are only sources you do not own, move your policy up with the DMARC Record Generator: p=none watches, p=quarantine sends failures to spam, and p=reject turns them away. If a row still looks wrong, run the domain through the Email Authentication Checker to see the live records side by side.
It covers what is broken, what we would build, the timeline, and one fixed price. Want it walked through instead? Book a 15 minute plan walkthrough.
Or just reply to the plan email. Either works.
